CVE-2017-2948: Buffer Overflow
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the XFA engine. Successful exploitation could lead to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2948?
CVE-2017-2948 has a critical severity level due to its potential for arbitrary code execution.
How do I fix CVE-2017-2948?
To fix CVE-2017-2948, update Adobe Acrobat Reader to a version later than 11.0.18 or Adobe Acrobat DC to a version later than 15.006.30244.
What types of systems are affected by CVE-2017-2948?
CVE-2017-2948 affects Adobe Acrobat Reader versions 11.0.18 and earlier as well as Adobe Acrobat DC versions prior to 15.006.30244.
What are the consequences of exploiting CVE-2017-2948?
Exploitation of CVE-2017-2948 could lead to arbitrary code execution on the victim's machine.
Which versions of Adobe Acrobat Reader need to be updated for CVE-2017-2948?
Adobe Acrobat Reader versions 11.0.18 and earlier need to be updated to address CVE-2017-2948.